MAL-2026-15810

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/gcphelpit/MAL-2026-15810.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-15810
Published
2026-09-01T16:19:02Z
Modified
2026-09-02T03:00:07.678755941Z
Summary
Malicious code in gcphelpit (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d)

The module src/gcphelpit/verify.py runs at import time: it reads the installer's ~/.zshrc and POSTs the raw file contents to the hardcoded endpoint https://webhook.site/bc67d797-61ff-4f3b-a9b8-5df6a5e7643d. cli.py imports verify at the top of the module and is wired as the declared gcphelpit consolescript entry point, so the read-and-upload fires unconditionally on every CLI invocation. ~/.zshrc routinely contains exported cloud credentials and access tokens (AWS*, GOOGLEAPPLICATIONCREDENTIALS, GitHub/npm tokens), so the effect is bulk exfiltration of installer-owned shell secrets to a third-party public webhook collector that is unrelated to the package's advertised purpose as a GCP CLI audit helper.

Source: kam193 (d3e108475330381be537963456cb012b943f2d0a3693c83205f8f5b01f36635a)

During initialization of the CLI, the package exfiltrates sensitive files. Prior version 0.1.2 the code was launching a calculator as PoC instead of exfiltrating data.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-09-gcphelpit

Reasons (based on the campaign):

  • files-exfiltration
Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2026-09-01T16:39:08.103916365Z",
            "source": "kam193",
            "versions": [
                "0.1.0",
                "0.1.1",
                "0.1.2"
            ],
            "id": "pypi/2026-09-gcphelpit/gcphelpit",
            "modified_time": "2026-09-01T16:19:02.685503Z",
            "sha256": "d3e108475330381be537963456cb012b943f2d0a3693c83205f8f5b01f36635a"
        },
        {
            "import_time": "2026-09-01T20:18:24.540360285Z",
            "source": "kam193",
            "versions": [
                "0.1.0",
                "0.1.1",
                "0.1.2"
            ],
            "id": "pypi/2026-09-gcphelpit/gcphelpit",
            "modified_time": "2026-09-01T16:19:02.685503Z",
            "sha256": "38e7bf3f1271f4094aa294a361c60b2bc393405a95b6f5f92eb86452c76c7ddf"
        },
        {
            "import_time": "2026-09-02T02:44:33.224498594Z",
            "source": "amazon-inspector",
            "versions": [
                "0.1.2"
            ],
            "id": "IN-MAL-2026-019320",
            "modified_time": "2026-09-02T02:19:06Z",
            "sha256": "6be1770a21667861e10f778ca485b270170e20a35a529bc2a041bc72266bdb7d"
        }
    ]
}
References
Credits

Affected packages

PyPI / gcphelpit

Package

Name
gcphelpit
View open source insights on deps.dev
Purl
pkg:pypi/gcphelpit

Affected ranges

Affected versions

0.*
0.1.0
0.1.1
0.1.2

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/gcphelpit/MAL-2026-15810.json"
indicators 
{
    "evidence_files": [
        {
            "path": "src/gcphelpit/_verify.py",
            "tlsh": "1ae0f1abd4ed2201839101f0c90d7c986616e0197308b0280e1020f09d49e9f270617a",
            "sha256": "322d0c2e23a8da3fc8beb4e7e95c353351746c2d8dbd160e71cb87a64d669d92"
        }
    ],
    "package_integrity": [
        {
            "filename": "gcphelpit-0.1.2-py3-none-any.whl",
            "hashes": {
                "sha256": "d075072618f99c3add6cf6374f3975fa66670d729b7d2300b71fc0449142573a",
                "blake2b_256": "234c8dec1d78530b081170719387d40635397c0b6e432e0ebe7a9e1af51dcf61",
                "md5": "f6d44d0794d3277c782fb38eca082cfd"
            }
        },
        {
            "filename": "gcphelpit-0.1.2.tar.gz",
            "hashes": {
                "md5": "a606dc681df87e9c0f71465c7e3f4222",
                "blake2b_256": "cc38aba766f0e3797926eeb7243815958520f48e9568b150fffbc627fdf71c1b",
                "sha256": "d1675309db87ddc8642f14385484b5e96d695bbd6a6f2bc691b78d69b3b375cd"
            }
        }
    ]
}
cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code"
    }
]